2026-10-25 15:15:01 +11:00
3 changed files with 31 additions and 0 deletions
@@ -0,0 +1,15 @@
+bound_service_account_names:
+  - default
+  - arrproxy-ci
+  - autobackup-operator-ci
+  - ghp
+  - jellyfin-plugin-sso
+  - kea-operator-ci
+  - mediamark-ci
+  - plugin-docker-buildx
+  - repospawner-ci
+bound_service_account_namespaces:
+  - woodpecker
+token_ttl: 600
+token_max_ttl: 600
+audience: https://kubernetes.default.svc.cluster.local
@@ -0,0 +1,3 @@
+---
+client_id: artifactapi
+ttl: 900
@@ -0,0 +1,13 @@
+---
+rules:
+  - path: "identity/oidc/token/artifactapi-writer"
+    capabilities:
+      - read
+
+auth:
+  k8s/au/syd1:
+    - woodpecker_artifactapi_writer
+  ldap:
+    - vault_admin
+  oidc:
+    - akP-vault-admin